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» Th MAILING DATE of this communication appears on th cov r sheet with the correspondence address « 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- if the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- if NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )M Responsive to communication(s) filed on 02 October 2003 . 
2a)D This action is FINAL. 2b)[X] This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
Disposition of Claims 

4) [3 Claim(s) 1 - 10, 13 - 22 and 25 - 33 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

. 5)D Claim(s) is/are allowed. 

6) E3 Claim(s) 1- 10. 13- 22 and 25- 33 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

1 1) D The proposed drawing correction filed on is: a)D approved b)D disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 120 

1 3) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (0. 

a)DAII b)D Some*c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 119(e) (to a provisional application). 

a) □ The translation of the foreign language provisional application has been received. 

15) Q Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121. 

Attachment(s) 

Notice of References Cited (PTO-892) 4) d Interview Summary (PTO-4 13) Paper No(s). . 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) 5) O Notice of Informal Patent Application (PTO-1 52) 

3) C] Information Disclosure Statement(s) (PTO-1449) Paper No(s) . 6) CD Other: 
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DETAILED ACTION 

1 . Claims 1 - 10, 13 - 22 and 25 - 33 are presented for examination. 



Claim Objections 



1 . Claim 1 is objected to because of the following informalities: The phrase of, a to go 
through a time-consuming process of setting up a new", on page 3 of the "Amendments To The 
Claims", appears to be typographically repeated on page 4. Appropriate correction is required. 



Claim Rejections - 35 USC § 112 



2. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

3. Claims 1, 13 and 25 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 



4. The term "time-consuming process", in claims 1,13 and 25, is a relative term which 
renders the claim indefinite. The term "time-consuming process " is not defined by the claim, 
the specification does not provide a standard for ascertaining the requisite degree, and one of 
ordinary skill in the art would not be reasonably apprised of the scope of the invention. The 
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Applicant could use the phrases of, "utilizing the same communication session" or "without 
setting up a new communication session", but could require further search and consideration. 

Claim Rejections - 35 USC §103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. Claims 1 - 5, 9, 13 - 17, 21 and 25 - 29 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Devarakonda et al. (6424992) (hereinafter Devarakonda) in view of Courts et 
al. (6085220) (hereinafter Courts). 

7. Referencing claim 1, Devarakonda teaches receiving a message from the client at a first 
server n the plurality of servers, the message including a session identifier that identifies a secure 
communication session with the client, (e.g. col. 3, lines 27 - 55 & col. 4, line 41 - col. 5, line 
12); and 

8. if the session identifier does not correspond to an active secure communication session on 
the first server, establishing an active secure communication session with the client on the first 
server by, (e.g. col. 3, lines 27 - 55 & col. 4, line 41 - col. 5, line 12), 
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9. attempting to retrieve state information associated with the session identifier for an active 
secure communication session between the client and a second server from the plurality of 
servers, (e.g. col. 9, lines 5 - 32), 

10. if the state information for the active secure communication session is retrieved, using the 
state information to establish the active secure communication session with the client without 
having to communicate with the client, whereby the secure communication session is transferred 
from the client and the second server to the client and the first server, (e.g. col. 3, lines 27 - 55 & 
col. 4, line 41 - col. 5, line 12), maintaining any related cryptography, (e.g. col. 3, line 35 - col. 
4, line 4), and 

11. if the state information for the active secure communication session is not retrieved, 
communicating with the client to establish the active secure communication session with the 
client, (e.g. col. 3, lines 27 - 55 & col. 4, line 41 - col. 5, line 12), but does not specifically teach 
without having to through a time-consuming process of setting up a new communication session. 

12. Courts teaches utilizing the communication session without having to through a time- 
consuming process of setting up a new communication session, (e.g. col. 7, line 25 - col. 8, line 
64, "global session server "the new session data for that SID (session ID) is again available 
for access"). It would have been obvious to one skilled in the art at the time the invention was 
made to combine the teaches of Courts with Devarakonda because when one uses the same 
session ID for every network transaction, the user could be unlawfully probed by outside users, 
"hackers" and information could be taken about the user. Utilizing cryptography for multiple 
server using the same session ID, for example, passing through a firewall, would provide 
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difficulty in the hackers attempts to gather information about the user, therefore, providing a 
saver network environment for the user. 

13. Referencing claim 2, Devarakonda teaches attempting to retrieve the state information 
includes: 

14. attempting to use the session identifier to identify the second server in the plurality of 
servers that has an active secure communication session with the client that corresponds to the 
session identifier, (e.g. col. 4, line 58 - col. 5, line 12 & col. 9, lines 5 - 32); and 

1 5. attempting to retrieve the state information from the second server, (e.g. col. 4, line 58 - 
col. 5, line 12 & col. 9, lines 5-32). 

16. Referencing claim 3, Devarakonda teaches attempting to retrieve the state information 
involves attempting to retrieve the state information from a centralized repository that is in 
communication with the plurality of servers, (e.g. col. 8, line 53 - col. 9, line 32). 

17. Referencing claim 4, Devarakonda teaches the centralized repository includes a database 
for storing the state information, (e.g. col. 3, line 27 - col. 5, line 12 & col. 8, line 53 - col. 9, 
line 32). 

18. Referencing claim 5, Devarakonda teaches establishing the active secure communication 
session involves establishing a secure sockets layer (SSL) connection with the client, (e.g. col. 3, 
lines 35- 55). 
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19. Referencing claim 9, Devarakonda teaches initially establishing an active secure 
communication session between the client and the second server, the active secure 
communication session being identified by the session identifier, (e.g. col. 4, line 58 - col 5, line 
12 & col. 9, lines 5 -32). 

20. Claims 13 - 17, 21 and 25 - 29 are rejected for similar reasons as stated above. 

21. Claims 6, 7, 10, 18, 19, 22, 30, 31 and 33 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Devarakonda (6424992) in view of Courts (6085220) in further view of 
Fielder et al. (6105133) (hereinafter Fielder). 

22. As per claim 6, Devarakonda teaches the state information includes: 

23. a session encryption key for the secure communication session, (e.g. col. 3, lines 35 - 
64); 

24. the session identifier for the secure communication session, (e.g. col. 7, line 56 - col. 8, 
line 34). Devarakonda and Courts do not teach a running message digest for the secure 
communication session. Fielder teaches a running message digest for the secure communication 
session, (e.g. col 2, line 60 - col. 3, line 42). It would have been obvious to one skilled in the art 
at the time the invention was made to combine Fielder with the combine system of Devarakonda 
and Courts because it would make the transferring of information more secure because of the 
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functionality of running message digest adding a signature to identify and authenticate the sender 
and message of the transferred information. 

25. As per claim 7, Devarakonda and Courts do not teach using the message to update the 
running message digest; and 

26. checkpointing the updated running message digest to a location outside of the first server. 
Fielder teaches using the message to update the running message digest, (e.g. col. 2, line 60 - 
col. 3, line 42); and 

27. checkpointing the updated running message digest to a location outside of the first server, 
(e.g. col. 2, line 60 - col. 3, line 42). It would have been obvious to one skilled in the art at the 
time the invention was made to combine Fielder with the combine system of Devarakonda and 
Courts because it would be more efficient for the message to update the running message digest 
so when a server with new information pertaining to state information occurs, the entire network 
will be able to access this information and utilize it in new secure data transfer, as appose to 
having to send a separate set of information to update the running message digest on each device, 
causing more traffic on the network, 

28. As per claim 10, Devarakonda and Courts do not teach attempting to retrieve the state 
information includes authenticating and authorizing the first server. Fielder teaches attempting to 
retrieve the state information includes authenticating and authorizing the first server, (e.g. col. 1, 
lines 3 1 - 44). It would have been obvious to one skilled in the art at the time the invention was 
made to combine Fielder with the combine system of Devarakonda and Courts because it would 
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make a system more secure if the receiver of the information could be authorized to the 
information by authenticating the information that was sent from the first server. Furthermore, it 
would make the information more difficult for other system to try and access the information 
without having the authentication and authorized access to the information. 

29. Claims 18, 19, 22, 30, 31 and 33 are rejected for similar reasons as stated above. 

30. Claims 8, 20 and 32 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Devarakonda (6424992) in view of Courts (6085220) in further view of Kennedy et al. 
(6134582). 

31. As per claim 8, Devarakonda and Courts do not teach if the state information for the 
active secure communication session is retrieved, purging the state information from a location 
from which the state information was retrieved, so that the state information cannot be 
subsequently retrieved by another server in the plurality of servers. Kennedy teaches if the state 
information for the active secure communication session is retrieved, purging the state 
information from a location from which the state information was retrieved, so that the state 
information cannot be subsequently retrieved by another server in the plurality of servers, (e.g. 
col 1, line 57 - col. 2, line 10). It would have been obvious to one skilled in the art at the time 
the invention was made to combine Kennedy with the combine system of Devarakonda and 
Courts because it would be more efficient for a system to free up space on a device that is no 
longer using that specific information on that particular device. 
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32. Claims 20 and 32 are rejected for similar reasons as stated above. 



Conclusion 



33. Applicants arguments with respect to claims 1 - 10, 13 - 22 and 25 - 33 have been 
considered but are moot in view of the new ground(s) of rejection. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David E. England whose telephone number is 703-305-5333. 
The examiner can normally be reached on Mon-Thur, 7:00-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, David A. Wiley can be reached on 703-308-5221. The fax phone number for the 
organization where this application or proceeding is assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is none. 



David E. England 

Examiner 

Art Unit 2143 




